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A METHOD AND APPARATUS FOR BRIDGING SERVICE FOR STANDARD 
OBJECT IDENTIFIER BASED PROTOCOLS 

BACKGROUND OF THE INVENTION 

5 

!• Technical Field 

The present invention relates generally to improved 
remote management and in particular to a method and an 
apparatus for accessing standard object identifiers using 
10 any one of a plurality of standard object identifier 
based protocol methods . 

2 • Description o£ the Related Art 

An Object Identifier (OID) is an Internet standard 

15 mechanism for uniquely naming objects that represent 

information to be remotely managed. Specifically, this 
mechanism is called the Structure of Management 
Information (SMI) . SMI allows a uniquely identified 
piece of management information (or object) , and 

20 attributes of this object, to be retrieved, managed and 
monitored. Many network management protocols make use of 
this Internet Engineering Task Force (IETF) SMI standard. 

The Simple Network Management Protocol (SNMP) is a 
widely used network monitoring and control protocol that 

25 makes use of OIDs . SNMP agents report information from 
various network components, such as hubs, routers, and 
bridges, to a workstation console used to manage the 
network. This information is contained in a Management 
Information Base (MIB) , which is a data structure that 

30 defines what information is obtainable from the network 
component and what can be controlled by the network 
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component. SNMP is a simple protocol as it does not 
contain relations like the two protocols discussed next. 

Lightweight Directory Access Protocol (LDAP) is 
another example of a management protocol that uses SMI 
5 OIDs. It is a simplified version of the X.500 standard. 
LDAP support is implemented in Web browsers and e-mail 
programs, which can query an LDAP- compliant directory. 
Queries in LDAP can be complex, such as the query for 
what printer objects can be accessed by a particular user 
10 object. 

The Common Information Model (CIM) also describes 
management information in an OID format. CIM is 
implementation independent, allowing different management 
applications to collect the required data from a variety 
15 of sources. CIM includes schemas for systems, networks, 
applications and devices, among others. It also provides 
data mapping definitions for the use of SNMP data from 
within a CIM schema. 

Currently if a server is processing queries using a 
20 variety of protocols, it must keep a separate repository 
of objects for each protocol. Often these repositories 
Q contain references to the same object, albeit with a 

different object identifier. If an object is being 
changed in different ways through two or more protocols, 
25 this can lead to inconsistencies. A single repository 

can eliminate such inconsistencies and save storage space 
since each object would only appear once. 

Furthermore, because providing support for each 
protocol may be cumbersome to developers of management 
30 applications, some of these developers have resorted to 
only supporting one or a few of these protocols. Thus, 
not all objects, i.e. network resources, may be 
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represented in each repository. As a result queries for 
objects not handled by the a particular protocol will not 
be able to be completed. 

Therefore, it would be advantageous to have a 
method and an apparatus that provides a common repository 
for all OID-based objects regardless of the protocol 
scheme and yet still allow queries from each of a variety 
of protocols, such as SNMP, LDAP, and CIM/XML. 
Furthermore, it would be advantageous to make the 
repository easily expandable to accept existing OID-based 
data trees from a current repository and seamlessly 
integrate the new repository into the combined logical 
repository. 
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SUMMARY OF THE INVENTION 



A method and apparatus is presented for maintaining 
a logical composite repository of Object Identifier (OID) 
tree structures on a server in a distributed data 
processing system. Each OID tree structure has been 
programmed to interface with an application programming 
interface (API) associated with an OID abstraction layer 
for the composite repository. An OID subtree structure 
can be added to the composite repository resulting in 
registration with the OID abstraction layer and, in 
addition, an OID subtree structure can be removed from 
the composite repository resulting in removal of the OID 
subtree structure from the registry associated with the 
OID abstraction layer. 

Any query from a requester in the distributed data 
processing system about an object contained in the 
logical composite repository associated with the server 
is processed by the OID abstraction layer. The query 
must be in a protocol, such as SNMP, LDAP, and CIM/XML, 
recognized by the OID abstraction layer. The repository 
associated with the object of the query is determined 
from the OID abstraction layer registry. The query is 
formatted to be consistent with the API associated with 
the OID abstraction layer and sent to the repository 
associated with the object. When a reply is received 
from the repository, it is formatted in the protocol of 
the original query and sent to the requester in the 
distributed data processing system. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

The novel features believed characteristic of the 
invention are set forth in the appended claims. The 
invention itself, however, as well as a preferred mode of 
use, further objectives and advantages thereof, will best 
be understood by reference to the following detailed 
description of an illustrative embodiment when read in 
conjunction with the accompanying drawings, wherein: 

Figure 1 is an exemplary diagram of a distributed 
data processing system in which the present invention may 
be implemented; 

Figure 2 is an exemplary block diagram of a server 
in which the present invention may be implemented; 

Figure 3A is an exemplary diagram of a standard 

object identifier tree illustrating the naming of nodes; 

J. 

Figure 3B is an exemplary diagram of a OID tree 
structure in accordance with the present invention; 

Figure 4 is an exemplary block diagram showing the 
relationship between the OID Abstraction Layer to 
external queries and a logical composite repository; and 

Figure 5 is a flowchart outlining an exemplary 
operation of the present invention. 
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DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 

With reference now to the figures, Figure 1 depicts a 
pictorial representation of a distributed data processing 
system. Distributed data processing system 100 is a 
network of computers in which the present invention may be 
implemented. Distributed data processing system 100 
contains a network 102, which is the medium used to 
provide communications links between various devices and 
computers connected together within distributed data 
processing system 100. Network 102 may include permanent 
connections, such as wire or fiber optic cables, or 
temporary connections made through telephone connections. 

In the depicted example, a server 104 is connected to 
network 102 along with storage unit 106. In addition, 
clients 108, 110, and 112 also are connected to network 
102. These clients 108, 110, and 112 may be, for example, 
personal computers or network computers. For purposes of 
this application, a network computer is any computer, 
coupled to a network, which receives a program or other 
application from another computer coupled to the network. 
In the depicted example, server 104 provides data, such as 
boot files, operating system images, and applications to 
clients 108-112. Clients 108, 110, and 112 are clients to 
server 104. Distributed data processing system 100 may 
include additional servers, clients, and other devices not 
shown . 

In the depicted example, distributed data processing 
system 100 is the Internet with network 102 representing a 
worldwide collection of networks and gateways that use the 
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TCP/IP suite of protocols to communicate with one another. 
At the heart of the Internet is a backbone of high-speed 
data communication lines between major nodes or host 
computers, consisting of thousands of commercial, 
5 government, educational and other computer systems that 
route data and messages. Of course, distributed data 
processing system 100 also may be implemented as a number 
of different types of networks, such as for example, an 
intranet, a local area network (LAN) , or a wide area 
10 network (WAN) . 

A management server 114 is connected to the network 
102 . The management server 114 remotely manages the 
various network devices 104-112 based on management 

in ' information gathered from the network devices 104-112. 

"yl 15 While a management "server" is shown in Figure 1, the 

management functions of the present invention may be 

»"' 

performed by a management application resident on any type 
^ computing device connected to the network 102 . 

in These network devices are remotely managed using 

^ 20 either a standard protocol, such as SNMP, LDAP, and 
□ CIM/XML, or another equivalent management protocol. 

™ Queries can be submitted. using the supported protocols 

to the server machines . 

Figure 1 is intended as an example, and not as an 
25 architectural limitation for the present invention. As 
may be readily apparent to those of ordinary skill in the 
art, many other types of devices may be connected to the 
network 102 without departing from the spirit and scope of 
the present invention. For example, the network 102 may 
30 provide a communication pathway for client devices to send 
and receive data from printers, plotters, scanners, 
multiple drive libraries, and the like. 
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As will be described in greater detail hereafter, 
the managed server, such as 104, for example, includes an 
OID abstraction layer and application program interface 
(API) for communicating with either a plurality of 
5 repositories or a single combined repository, depending . 
on the particular embodiment, as will be described 
hereafter. The OID abstraction layer receives queries 
for objects in any of a number of different protocols, 
such as SNMP, LDAP or CIM/XML, and the like, from a 
10 management application running in a management server 
114. 

The OID abstraction layer identifies the object in 
the query, determines a repository in which the object is 
represented, and sends a request to the repository for the 

15 desired object via the API. The repository responds to 

the API with the object information which is placed into a 
reply message formatted for the proper protocol and sent 
to the requesting application. 

Referring to Figure 2, a block diagram of a data 

20 processing system that may be implemented as a management 
server or a managed server, such as management server 114 
or managed server 104 in Figure 1, is depicted in 
accordance with a preferred embodiment of the present 
invention. Data processing system 200 may be a symmetric 

25 multiprocessor (SMP) system including a plurality of 
processors 202 and 204 connected to system bus 206. 
Alternatively, a single processor system may be employed. 
Also connected to system bus 206 is memory 
controller /cache 208, which provides an interface to local 

30 memory 209. I/O bus bridge 210 is connected to system bus 
206 and provides an interface to I/O bus 212. Memory 
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controller/cache 208 and I/O bus bridge 210 may be 
integrated as depicted. 

Peripheral component interconnect (PCI) bus bridge 
214 connected to I/O bus 212 provides an interface to PCI 
local bus 216. A number of modems may be connected to PCI 
bus 216. Typical PCI bus implementations will support 
four PCI expansion slots or add-in connectors. 
Communications links to network computers 108-112 in 
Figure 1 may be provided through modem 218 and network 
adapter 220 connected to PCI local bus 216 through add- in 
boards . 

Additional PCI bus bridges 222 and 224 provide 
interfaces for additional PCI buses 226 and 228, from 
which additional modems or network adapters may be 
supported. In this manner, data processing system 200 
allows connections to multiple network computers. A 
memory-mapped graphics adapter 230 and hard disk 232 may 
also be connected to I/O bus 212 as depicted, either 
directly or indirectly. 

Those of ordinary skill in the art will appreciate 
that the hardware depicted in Figure 2 may vary. For 
example, other peripheral devices, such as optical disk 
drives and the like, also may be used in addition to or in 
place of the hardware depicted. The depicted example is 
not meant to imply architectural limitations with respect 
to the present invention. The data processing system 
depicted in Figure 2 may be, for example, an IBM 
RISC/System 6000 system, a product of International 
Business Machines Corporation in Armonk, New York, running 
the Advanced Interactive Executive (AIX) operating system. 
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The management server, such as management server 114, 
includes one or more network device management 
applications used to remotely manage a plurality of 
network devices 104-112 over a network 102. These one or 
5 more network device management applications may be stored, 
for example, in local memory 209, for example, and used to 
control the operations of the processor 202 or 204 on a 
remotely managed server 104. As mentioned above, in a 
preferred embodiment of the present invention, the 
10 management server 114 manages the network devices 104-112 
using a protocol such as SNMP, LDAP, CIM/XML, or a 
^ proprietary scheme . 

\g Since it is often necessary to support multiple 

protocols on the same server, in known systems, a separate 
LJ 15 repository and processing system must be maintained for 

^ each protocol. Furthermore, the same object might be 

i 

M= referenced by different schemes and information may be 

L changed in an inconsistent manner so that the same query 

yl made using different protocols produces different results. 

12 20 The present invention provides an OID abstraction 

□ layer and API executed by the processor 202 and/or 204 of 

^ the managed server 200, for interpreting queries in 

various protocol formats, determining a repository in 

which requested object information is resident, sending a 
25 request message to the identified repository, and 

inserting the received object information into a message 

formatted for the appropriate protocol . 

Figure 3A is an exemplary diagram of a standard 

object identifier (OID) tree data structure that can be 
30 processed by the present invention. Figure 3A is only 

intended to be a simplified depiction of a fictitious 

tree data structure that will aid in the understanding of 
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the present invention and does not necessarily correspond 
to an actual standardized tree data structure. It should 
be noted that, while Figure 3A depicts some nodes as 
having a single branch, these nodes may contain 
additional branches which are not shown for clarity. 
Figure 3A is only an example to illustrate the OID 
numbering scheme and a different tree data structures of 
more or less complicated architectures are possible. 

As shown in Figure 3A, the nodes of the tree data 
structure designate "objects" and are represented by 
object identifiers (OIDs) . An "object" in the context of 
the tree refers to an entry in the tree. These OIDs are 
often referred to by their human readable branch names 
rather than their numerical value. Thus, for example, an 
object OID of a tree may have a numerical value but be 
referred to as "Age" or "Name" or the like. The objects 
of the tree represent tables and record entries within 
tables. Thus, for example, a table "Person" may be 
comprised of records having entries corresponding to an 
index, a name, and an age. 

An OID tree structure starts with a single root 
labeled 0. This is a unique label in the tree so it is 
always easy to identify the root of the tree. A node may 
have no children or it may have any number of children. 
If there are n child nodes, then these child nodes are 
labeled with integer values 1 through n. Following the 
path from the root to a particular node gives a unique 
numeric name for the node. For example, the node 302 can 
be reached via root 0, the root's child 1, I's child 2, 
and 2's child 1. This path is indicated by starting at 
the root and sequencing each node number, separated by a 
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dot, until the desired node is reached. So node 302 is 
identified as "0.1.2.1". 

Since every path starts at the root, which is 
uniquely numbered 0, every node below the root will have 
"0." at the start of its OID. Since this is always true, 
the "0." may be omitted without loss of clarity. 
Consequently, node 302 may be identified as "1.2.1". In 
a similar manner, node 304 is identified as "2.1.2.1,1" 
and node 306 is identified as, "2.1.3.4". As one of 
ordinary skill in the art will appreciate, this 
standardized numbering scheme will guarantee that each 
node in the tree will have a unique OID according to its 
path. 

It is generally accepted that the IETF and other 
standards bodies maintain that every object that is 
standardized or registered is assigned a unique 
identification and this identification is never 
reassigned to another object, even if the original object 
no longer exists. The numbering scheme shown in Figure 
3A is representative of a complete tree for all objects, 
but, in reality, a server will only be managing very 
small subtrees of this complete tree. As we will see in 
Figure 3B, the tree is very sparse. However, when a 
subtree is added to a server for the first time, it is 
generally accepted that it is guaranteed that the objects 
in the subtree have unique names . 

For humans, these paths are long and laborious, so a 
symbolic name can be associated with a path. For 
example, the node for a printer may have the OID of 
2.1.2.1.1, but it is much easier to read 

printer . pr interTable . pr interEntry . pr interName . printer 1 . 
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A number of communication protocols make use of the 
OID tree structure for managing network resources. Some 
of these protocols include SNMP, LDAP, CIM/XML and the 
like. The present invention provides a mechanism by 
5 which each of these protocols is supported and object 
information represented in server repositories are 
equally accessible by queries provided in each of the 
other protocols. 

Figure 3B is an exemplary diagram of an OID tree 
10 structure in accordance with the present invention. As 
shown in Figure 3B, the OID tree structure is separated 
into three subtrees 308, 310, and 312. These sections 

Q 

represent OID objects that are maintained by different 

m repositories but the objects are contained in a logical 

03 

jVi 15 composite tree. Thus, for example, a first subtree 308 

4^ may represent a first set of objects that are SNMP 

Ms 

L objects. A second subtree 310 may represent a second set 

1^ of objects that are CIM objects. A third subtree 312 may 

yi represent a third set of objects that are LDAP objects, 

t-y 20 The roots of these subtrees have been assigned numeric 

□ values to indicate the sparcity of the tree. 

Support for multiple protocols is desirable since 
different circumstances require different processing 
speeds. SNMP is a very simple protocol and the 
25 corresponding repository may be small enough to be 

resident in memory. Since queries are simple, very fast 
processing is possible. A repository capable of 
supporting SNMP would be appropriate for information that 
is changing rapidly and dynamically, such as packet 
30 traffic on a network. 

LDAP is a much more complex protocol and the 
information in a repository supporting LDAP is often 
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stored in secondary storage. It is well suited for 
information that is more static in nature, such as IP 
addresses associated with particular network interface 
cards. The advantage of LDAP is that complex, relational 
queries are possible. The present invention allows 
multiple repositories to coexist in a single logical 
composite repository where potential inconsistencies are 
eliminated. 

CIM is a very general data model used to represent 
any type of information and, in itself, is independent of 
any protocol. XML (extensible Markup Language) is often 
used as a transport for CIM data, so, as a protocol, one 
refers to CIM/XML. 

The present invention provides a mechanism by which 
each of these protocols is able to be used with objects 
in various repositories regardless of the particular 
format the repository supports. These repositories may 
be separate repositories or a combined repository. 

With reference now to Figure 4, an exemplary 
functional block diagram illustrating a managed server is 
provided. As shown in Figure 4, the managed server 
includes an OID abstraction layer 414, a corresponding 
API 416, various repositories 408-412 and protocol 
interfaces 402-406. The elements shown in Figure 4, in a 
preferred embodiment, are implemented as software 
executing on a managed server, such as server 200. Of 
course, some or all of these elements may also embodied 
as hardware elements without departing from the spirit 
and scope of the present invention as will be readily 
apparent to those of ordinary skill in the art. 

As shown in Figure 4, three protocol interfaces are 
provided through which queries may be received and reply 
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messages may be sent: LDAP 402, SNMP 404, and CIM/XML 
406. As one of ordinary skill in the art will 
appreciate, other protocols could be used provided the 
OID Abstraction Layer 414 has been programmed to 
5 recognize, process, and send responses according to the 
particular protocol. 

Three repositories are shown. Repository #1 408, 
Repository #2 410, and Repository #3 412. Each repository 
uses an OID tree structure, similar to the structure 

10 illustrated in Figure 3B. These repositories can be used 
to support a standard protocol or they may support a 
proprietary protocol. For example. Repository #1 408 may 
be suited to support SNMP, Repository #2 410 may be more 
suited to support LDAP, and Repository #3 412 may use a 

15 proprietary structure. The data itself is independent 
from the protocol, thus separable repositories can be 
stored in a single, logical composite tree structure. 

OID Abstraction Layer 414 receives queries from 
applications using different protocols, e.g., SNMP, LDAP, 

20 CIM/XML, for object information maintained by one or more 
of the repositories 408-412. The OID Abstraction Layer 
414 is able to interpret the received queries and 
determine the object information which is sought. 

Based on the object information sought, the OID 

25 Abstraction Layer 414 identifies a repository in which 
the object information is maintained. This may be done, 
for example, based on a registry kept in the OID 
Abstraction Layer 414, as will be discussed hereafter. 
The repository identifies itself to the OID Abstraction 

30 Layer 414 by sending a registration message to the OID 
Abstraction Layer through the API 416. 
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The repositories 408-412 include data structures 
that store the object information as well as a software 
application that may be used to search and retrieve 
information from the data structures. These software 
5 applications are provided with the ability to communicate 
with the API 416. Each repository must be programmed to 
work with this API, regardless of the protocol or 
protocols supported by the repository. This protocol 
support is established when the subtree is registered 

10 with the OID abstraction layer 414. OID Abstraction 
Layer 414 maps all incoming requests, regardless of 
protocol, into an API request that the attached 
repository can understand. 

When a request is received from API 416, the 

15 repository understands the request, searches the data 

structure for the requested object information, and sends 
a reply message to the API 416 with the requested object 
information. The API 416 provides the requested object 
information to the OID Abstraction Layer 414. The OID 

20 Abstraction Layer 414 then generates a reply message to 

the application that sent the request. The reply message 
is formatted for the particular protocol used in the 
request message from the requesting application. The 
reply message is then sent to the appropriate protocol 

25 interface 402-406. 

As a more specific example, suppose that an SNMP 
query arrives via the SNMP interface 404 and the query 
deals with information in Repository #2 410 which has 
been registered to support the LDAP protocol. SNMP is a 

30 very simple protocol with operations like get, getnext, 

set, and so forth. The SNMP query is mapped into the API 
query and sent to the repository #2 . When the response to 
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the query is returned to OID Abstraction Layer 414, it is 
formatted into an SNMP response and sent back to the 
source of the query. 

Not every protocol operation can be mapped into an 
equivalent operation in another protocol. For example, 
LDAP and CIM/XML can store information about 
relationships between nodes. Suppose Repository #2 410 
contains information about five users and ten printers, 
and has registered with the OID abstraction layer as 
supporting the LDAP protocol. An LDAP query of "What 
printers are associated with user X" can be answered. 
However, SNMP does not contain this type of relational 
structure, so the objects in Repository #1 408, which 
have been registered as being able to support only the 
SNMP protocol, would not be able to respond to this type 
of query. If the OID Abstraction 414 received an LDAP 
query of the form "What printers are associated with User 
Y" where User Y is contained in Repository #1 408, OID 
Abstraction Layer 414 would have to respond that the 
query cannot be satisfied. 

When a repository is added to the set of 
repositories, it is registered with OID Abstraction Layer 
414 based on the protocol capabilities it can support. 
The registry provides information identifying the anchor 
points in the OID tree structure maintained by the 
repository. These anchor points are the objects in the 
OID tree structure that define a subtree of objects and 
their attributes. If a query is received for an object 
that has an OID that is below this anchor point in the 
OID tree structure, the OID Abstraction Layer 414 is able 
to determine that the object information for the 
requested object must be in the repository that maintains 
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the object anchor point. In this way, the OID 
Abstraction Layer 414 is able to identify which 
repository maintains object information for a requested 
object . 

Since all repositories support a standard OID 
format, it is natural to ask if two repositories can 
attempt to register for the same OID subtrees. The 
easiest approach is to not allow the registry to change 
and simply refuse the second attempt to re-register for 
the same subtree support. An alternative approach, which 
can be supported by a preferred embodiment, is to allow 
the registry to change, but the registration must always 
be unique and simply could be based on the last 
repository registration for a given subtree. 

A composite repository is beneficial in that only 
one repository has to maintain potentially multiple 
instances of single server resource. Thus, the problems 
associated with having multiple objects, supported by 
multiple repositories, referencing the same server 
resource are avoided. In addition, if a single 
repository is utilized, the need for the OID Abstraction 
Layer 414 to determine which repository maintains the 
object information would be greatly simplified. 

Individual repositories can also be removed from the 
composite repository and the corresponding entries 
removed from the registry of OID Abstraction Layer 414. 
For example, many devices include uninstall programs for 
use when the device is removed from a particular domain. 
If the device had previous been added to the registry of 
OID Abstraction Layer 414, it is possible to have the 
uninstall program remove that entry. 
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Figure 5 is a flowchart outlining an exemplary 
operation of the present invention. As shown in Figur 
5, the operation starts with the receipt of a request 
message from an application in a particular communication 
protocol (step 510) . The object information in the 
request is identified (step 520) and a repository that 
maintains this object information is identified based on 
a repository registry (step 530) . The incoming request 
must be mapped to an equivalent request using the API 
(step 535) . Once the repository is identified and the 
API request formulated, the request is sent to the 
repository for the object information (step 540) . A 
reply message is received from the repository with the 
requested object information (step 550) . The requested 
object information is then inserted into a reply message 
formatted to the protocol used by the requesting 
application and sent to the requesting application (step 
560) . The operation then ends. 

Thus, the present invention provides a mechanism by 
which object information for objects in various 
repositories may be accessed regardless of the particular 
protocol used. Furthermore, the present invention 
provides a mechanism by which a combined repository may 
be utilized by a plurality of applications using 
different communication protocols. 

The description of the present invention has been 
presented for purposes of illustration and description 
but is not intended to be exhaustive or limited to the 
invention in the form disclosed. Many modifications and 
variations will be apparent to those of ordinary skill in 
the art. The embodiment was chosen and described in 
order to best explain the principles of the invention and 
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the practical application, and to enable others of 
ordinary skill in the art to understand the invention 
various embodiments with various modifications as are 
suited to the particular use contemplated 



